KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,220
CVEs
34
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 279High 217Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43493 | 9.8 | May 19 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests Affected: 2.6.34 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; +1 more |
| CVE-2026-43465 | 9.8 | May 8 | net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ Affected: 6.6.115 before 6.7; 6.12.56 before 6.13; 6.17.6 before 6.18; 6.18.1 before 6.18.19; 6.19 before 6.19.9; 6.18; +8 more |
| CVE-2026-43414 | 9.8 | May 8 | scsi: qla2xxx: Completely fix fcport double free Affected: 5.15.154 before 5.16; 6.1.84 before 6.2; 6.6.24 before 6.7; 6.7.12 before 6.8; 6.8.3 before 6.9; 6.9.1 before 6.19.9; +10 more |
| CVE-2026-43402 | 9.8 | May 8 | kthread: consolidate kthread exit paths to prevent use-after-free Affected: 6.14 before 6.18.19; 6.19 before 6.19.9; 7.0; 7.0 |
| CVE-2026-43384 | 9.8 | May 8 | net/tcp-ao: Fix MAC comparison to be constant-time Affected: 6.7 before 6.12.78; 6.13 before 6.18.19; 6.19 before 6.19.9; 7.0; 7.0 |
| CVE-2026-43379 | 9.8 | May 8 | ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Affected: 6.6.32 before 6.6.130; 6.9 before 6.12.78; 6.13 before 6.18.19; 6.19 before 6.19.9; 7.0; 7.0; +1 more |
| CVE-2026-43376 | 9.8 | May 8 | ksmbd: fix use-after-free by using call_rcu() for oplock_info Affected: 6.6.88 before 6.6.130; 6.12.25 before 6.12.78; 6.14.4 before 6.15; 6.15.1 before 6.18.19; 6.19 before 6.19.9; 6.15; +8 more |
| CVE-2026-43341 | 9.8 | May 8 | net/ipv6: ioam6: prevent schema length wraparound in trace fill Affected: 5.15 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +6 more |
| CVE-2026-43304 | 9.8 | May 8 | libceph: define and enforce CEPH_MAX_KEY_LEN Affected: 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43208 | 9.8 | May 6 | net: do not pass flow_id to set_rps_cpu() Affected: 6.18 before 6.18.16; 6.19 before 6.19.6; 7.0 |
| CVE-2026-43198 | 9.8 | May 6 | tcp: fix potential race in tcp_v6_syn_recv_sock() Affected: 2.6.12.1 before 6.18.16; 6.19 before 6.19.6; 2.6.12; 2.6.12; 2.6.12; 2.6.12; +2 more |
| CVE-2026-43186 | 9.8 | May 6 | ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() Affected: 5.15 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43185 | 9.8 | May 6 | ksmbd: fix signededness bug in smb_direct_prepare_negotiation() Affected: 5.15 before 6.18.16; 6.19 before 6.19.6; 7.0 |
| CVE-2026-43125 | 9.8 | May 6 | dlm: validate length in dlm_search_rsb_tree Affected: 3.4 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43067 | 9.8 | May 5 | ext4: handle wraparound when searching for blocks for indirect mapped blocks Affected: 5.15.203 before 5.16; 6.6.130 before 6.6.134; 6.12.77 before 6.12.80; 6.18.14 before 6.18.21; 6.19.4 before 6.19.11; 6.1.167 |
| CVE-2026-43039 | 9.8 | May 1 | net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch Affected: 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; +1 more |
| CVE-2026-43038 | 9.8 | May 1 | ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Affected: after 3.13 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +14 more |
| CVE-2026-43037 | 9.8 | May 1 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Affected: 2.6.22 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +7 more |
| CVE-2026-43011 | 9.8 | May 1 | net/x25: Fix potential double free of skb Affected: 2.6.12.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +12 more |
| CVE-2026-31718 | 9.8 | May 1 | ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger Affected: 6.6.32 before 6.7; 6.9 before 6.12.84; 6.13 before 6.18.25; 6.19 before 7.0.2; 7.1 |
| CVE-2026-31705 | 9.8 | May 1 | ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Affected: 5.15.145 before 5.16; 6.1.71 before 6.2; 6.6 before 6.6.136; 6.7 before 6.12.84; 6.13 before 6.18.25; 6.19 before 7.0.2 |
| CVE-2026-31669 | 9.8 | Apr 24 | mptcp: fix slab-use-after-free in __inet_lookup_established Affected: 5.12.1 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; 6.19 before 6.19.13; +8 more |
| CVE-2026-31668 | 9.8 | Apr 24 | seg6: separate dst_cache for input and output paths in seg6 lwtunnel Affected: 4.10.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; +9 more |
| CVE-2026-31659 | 9.8 | Apr 24 | batman-adv: reject oversized global TT response buffers Affected: 3.13.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; +9 more |
| CVE-2026-31657 | 9.8 | Apr 24 | batman-adv: hold claim backbone gateways by reference Affected: 3.5.1 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; 6.19 before 6.19.13; 3.5; +7 more |
| CVE-2026-31649 | 9.8 | Apr 24 | net: stmmac: fix integer underflow in chain mode Affected: 3.2.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; +9 more |
| CVE-2026-31637 | 9.8 | Apr 24 | rxrpc: reject undecryptable rxkad response tickets Affected: 2.6.22.1 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; 6.19 before 6.19.13; 2.6.22; 7.0; +6 more |
| CVE-2026-31633 | 9.8 | Apr 24 | rxrpc: Fix integer overflow in rxgk_verify_response() Affected: 6.16.1 before 6.18.23; 6.19 before 6.19.13; 6.16; 7.0; 7.0; 7.0; +4 more |
| CVE-2026-31609 | 9.8 | Apr 24 | smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() Affected: before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31608 | 9.8 | Apr 24 | smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() Affected: before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31607 | 9.8 | Apr 24 | usbip: validate number_of_packets in usbip_pack_ret_submit() Affected: 2.6.39 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31589 | 9.8 | Apr 24 | mm: call ->free_folio() directly in folio_unmap_invalidate() Affected: 6.14 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31536 | 9.8 | Apr 24 | smb: server: let send_done handle a completion without IB_SEND_SIGNALED Affected: 5.15 before 6.18.11; 6.19 before 6.19.1 |
| CVE-2026-31533 | 9.8 | Apr 23 | net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Affected: 5.15.160 before 5.15.203; 6.1.84 before 6.1.169; 6.6.18 before 6.6.135; 6.7.6 before 6.8; 6.8.1 before 6.12.82; 6.13 before 6.18.23; +8 more |
| CVE-2026-31501 | 9.8 | Apr 22 | net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path Affected: 6.15.1 before 6.19.11; 6.15; 7.0; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31478 | 9.8 | Apr 22 | ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Affected: 5.15.145 before 5.15.203; 6.1.71 before 6.1.168; 6.6.1 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; +8 more |
| CVE-2026-31463 | 9.8 | Apr 22 | iomap: fix invalid folio access when i_blkbits differs from I/O granularity Affected: 6.19 before 6.19.11; 7.0; 7.0; 7.0; 7.0; 7.0 |
| CVE-2026-31444 | 9.8 | Apr 22 | ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Affected: 6.12.78 before 6.12.80; 6.18.19 before 6.18.21; 6.19.9 before 6.19.11; 6.6.130; 7.0; 7.0 |
| CVE-2026-31436 | 9.8 | Apr 22 | dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Affected: 6.8 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31414 | 9.8 | Apr 13 | netfilter: nf_conntrack_expect: use expect->helper Affected: 2.6.30 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +5 more |
| CVE-2026-31405 | 9.8 | Apr 6 | media: dvb-net: fix OOB access in ULE extension header tables Affected: 2.6.12.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.19; +8 more |
| CVE-2026-31402 | 9.8 | Apr 3 | nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Affected: 2.6.12.1 before 5.10.253; 5.11 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; 6.19 before 6.19.10; +9 more |
| CVE-2026-23450 | 9.8 | Apr 3 | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Affected: 5.15.174 before 5.15.203; 5.18 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; 6.19 before 6.19.10; +5 more |
| CVE-2026-23240 | 9.8 | Mar 10 | tls: Fix race condition in tls_sw_cancel_work_tx() Affected: 5.3.1 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6; 5.3; 5.3; 5.3; +4 more |
| CVE-2026-23112 | 9.8 | Feb 13 | nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec Affected: 5.0 before 5.10.250; 5.11 before 5.15.200; 5.16 before 6.1.163; 6.2 before 6.6.124; 6.7 before 6.12.70; 6.13 before 6.18.10; +8 more |
| CVE-2025-22088 | 9.8 | Apr 16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called,… Affected: 6.0 before 6.1.134; 6.2 before 6.6.87; 6.7 before 6.12.23; 6.13 before 6.13.11; 6.14 before 6.14.2 |
| CVE-2025-21796 | 9.8 | Feb 27 | nfsd: clear acl_access/acl_default after releasing them Affected: 2.6.13 before 5.10.235; 5.11 before 5.15.179; 5.16 before 6.1.129; 6.2 before 6.6.79; 6.7 before 6.12.16; 6.13 before 6.13.4; +2 more |
| CVE-2022-49362 | 9.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf, so don't… Affected: 5.18 before 5.18.4; 5.19 |
| CVE-2022-49093 | 9.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for page_pool fragment recycling Fix a use-after-free when using page_pool with page… Affected: 5.15 before 5.15.34; 5.16 before 5.16.20; 5.17 before 5.17.3; 5.18 |
| CVE-2024-53177 | 9.8 | Dec 27 | smb: prevent use-after-free due to open_cached_dir error paths Affected: before 6.6.64; 6.7 before 6.11.11; 6.12 before 6.12.2 |
The 500 most important CVEs for this product (exploited first, then by severity)